netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant